Back Cybernews

Fake Indeed apps infecting Android-using job seekers with malware

Cybernews • August 28, 2026

As job interviews have become one of the most popular attack vectors among scammers, they've now started exploiting trust in Indeed, a major employment website.

Cybersecurity firm Malwarebytes said it had found several reports indicating that criminals are using fake job listings on Indeed, one of the world’s largest employment platforms, to target job seekers with Android malware.

The process is similar to other fake job interview-related attacks, as scammers try to lure potential victims into downloading malicious software.

In the Indeed case, criminals pretend to be from recruitment firms and, after an initial , urge victims, e.g., to install a special "Indeed interview" app to go through the hiring process.

According to security researchers from Malwarebytes , scammers are trying to lure their victims into downloading a malicious app by saying that "identity verification is required," "salary agreement is available after app installation," and using other tricks.

What's more, the app isn’t hosted on Google Play – the criminals instruct their victims on how to download it. The security researchers classify these apps as Trojan droppers, which are first-stage malware components designed to get another malicious payload, in this case spyware, onto the victim's device.

This spyware can give criminals control over infected devices, but, for now, no financial losses besides one user claiming they needed to get a new phone have been reported.

Malwarebytes also confirmed that the malware is capable of preventing an uninstall, as when the victim tries to do so in Android Settings, the malicious application forces the screen back.

According to the researchers, if you want to stay away from these traps, simply remember that "a job interview should not require you to sideload an Android app, enable a VPN connection, or install software from an unknown source."

What's more, verify job offers through other channels and don’t install apps just because someone tells you to.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Spyware Scam Targets Indeed Users with Fake Interview Apps Cybercriminals are targeting job seekers on Indeed by promoting fake interview apps that install malware on Android devices. Malwarebytes reported that users are tricked into downloading a malicious APK file named 'MyInterview' after responding to fake job offers. The apps mimic the Indeed login page and, once installed, establish a VPN connection to steal user data. Victims have reported that the malware prevents app uninstallation and compromises device functionality. The attacks have been reported globally, including in Brazil and Great Britain. Indeed has confirmed that legitimate interviews do not require downloading additional apps. Security experts advise job seekers to verify job offers through official channels and avoid sideloading apps. No financial losses have been reported yet, but the malware poses a significant risk to personal data security. 3 sources 62

Extracted Entities

Fake Indeed apps infecting Android-using job seekers with malware

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (2)